52 SQL Injection Database Enumeration DBMS fingerprint Part 10
דרג סרטון זה
התחבר כדי לדרג
תיאור
Database Enumeration MySQL fingerprint Before enumerating the database, we usually need to identify the type of DBMS we are dealing with. This is because every DBMS has different queries, and knowing what they are will help us know which queries to use. As a first guess, if the web server we see in the HTTP responses is Apache or Nginx, it's a good guess that the web server is running on Linux, so the DBMS is probably MySQL. The same applies to a Microsoft DBMS if the web server is IIS, so it is most likely MSSQL. However, this is a wild guess, as many other operating system or web server databases can be used. Therefore, there are various queries that we can check for a fingerprint of the type of database we are dealing with. As we cover MySQL in this module, give us a fingerprint of MySQL databases.